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AMENDMENTS TO THE CLAIMS 



Amended claims follow: 

1 . (Currently Amended) A method of transferring a requested file for a 
computer malware scanning software comprising the steps of: 

receiving a request to transfer a file from a computer malware scanning software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file selected in a random order 
by the computer malware scanning software from among portions of the requested file 
and based on a portion of the requested file to be scanned by the computer malware 
scanning software, wherein the randomly accessed portion of the requested file is 
requested utilizing a byte range technique; 

in response to a determination that the requested portion of the requested file 
cannot be transferred, transferring an entirety of the requested file and supplying the 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file, wherein it is determined that the requested 
portion of the requested file cannot be transferred if the requested portion of the requested 
file cannot be randomly accessed: 

in response to a determination that the requested portion of the requested file can 
be transferred, t ransferring the requested portion of the requested file and supplying the 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
requested file; and 

determining whether information associated with the requested file has changed; 

wherein the byte range technique turns a serial download mechanism into a 
random access file mechanism; 

wherein the data associated with the request from the computer malware scanning 
software comprises a plurality of randomly accessed portions of the requested file. 
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2. (Previously Presented) The method of claim 1 , wherein the request to transfer the 
requested file from the computer malware scanning software comprises a request to 
transfer the requested file from an external system. 

3. (Original) The method of claim 2, wherein the external system is 
communicatively connected via a network. 

4. (Original) The method of claim 3, wherein the network comprises the Internet. 

5. (Previously Presented) The method of claim 4, wherein the step of transferring the 
requested portion of the requested file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 
requested file. 

6. (Original) The method of claim 5, wherein the session is a hypertext transfer 
protocol session. 

7. (Previously Presented) The method of claim 6, wherein the hypertext transfer 
protocol session uses the byte range technique. 

8. (Cancelled) 

9. (Cancelled) 

10. (Currently Amended) The method of claim [[9]]1, wherein an indication that the 
requested portion of the requested file cannot be randomly accessed comprises an error 
indication or a transfer of the entire requested file. 

11. (Cancelled) 

12. (Previously Presented) The method of claim 1, wherein the information comprises 
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hypertext transfer protocol entity tags or last modified timestamp information. 

1 3. (Original) The method of claim 1 2, further comprising the step of: 
restarting the requests from the computer malware scanning software for data. 

14. (Currently Amended) The method of claim 1 3, further comprising the step of: 
transferring [[an]]the entirety of the requested file. 

15. (Previously Presented) The method of claim 1, further comprising the step of: 
performing the steps of claim 1 in response to a request from a user system for the 

requested file. 

16. (Previously Presented) The method of claim 15, further comprising the steps of: 
scanning at the computer malware scanning software the data comprising a 

portion of the requested file to determine if the requested file includes a computer 
malware; and 

delivering the requested file to the user system in response to determining that the 
requested file does not include a computer malware. 

1 7. (Currently Amended) The method of claim 1 6, wherein the step of delivering the 
requested file to the user system comprises the steps of: 

determining whether [[an]]the entirety of the requested file has been transferred; 

starting delivery of the requested file to the user system even if the entire file has 
not been transferred; and 

transferring those portions of the requested file that have not been transferred and 
delivering those portions of the requested file once they have been transferred. 

18. (Previously Presented) The method of claim 17, wherein the step of transferring 
those portions of the requested file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the 
requested file that have not been transferred. 
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1 9. (Original) The method of claim 1 8, wherein the session is a hypertext transfer 
protocol session. 

20. (Previously Presented) The method of claim 19, wherein the hypertext transfer 
protocol session uses the byte range technique. 

2 1 . (Currently Amended) A system for transferring a requested file for a 
computer malwaro scanning software c omprising: 

a processor operable to execute computer program instructions; 
a memory operable to store computer program instructions executable by the 
processor; and 

computer program instructions stored in the memory and executable to perform 
the steps of: 

receiving a request to transfer a file from a computer malware scanning 
software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file selected in a random order 
by the computer malware scanning software from among portions of the requested file 
and based on a portion of the requested file to be scanned by the computer malware 
scanning software, wherein the system is operable such that the randomly accessed 
portion of the requested file is requested utilizing a byte range technique; 

in response to a determination that the requested portion of the requested file 
cannot be transferred, transferring an entirety of the requested file and supplying the 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file, wherein the system is operable such that it is 
determined that the requested portion of the requested file cannot be transferred if the 
requested portion of the requested file cannot be randomly accessed: 

in response to a determination that the requested portion of the requested file can 
be transferred, t ransferring the requested portion of the requested file and supplying the 
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requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
requested file; and 

determining whether information associated with the requested file has changed; 

wherein the system is operable such that the byte range technique turns a serial 

download mechanism into a random access file mechanism; 

wherein the system is operable such that the data associated with the request from 
the computer malware scanning software comprises a plurality of randomly accessed 
portions of the requested file. 

22. (Previously Presented) The system of claim 21, wherein the request to transfer the 
requested file from the computer malware scanning software comprises a request to 
transfer the requested file from an external system. 

23. (Original) The system of claim 22, wherein the external system is 
communicatively connected via a network. 

24. (Original) The system of claim 23, wherein the network comprises the Internet. 

25. (Previously Presented) The system of claim 24, wherein the step of transferring 
the requested portion of the requested file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 
requested file. 

26. (Original) The system of claim 25, wherein the session is a hypertext transfer 
protocol session. 

27. (Previously Presented) The system of claim 26, wherein the hypertext transfer 
protocol session uses the byte range technique. 
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28. (Cancelled) 

29. (Cancelled) 

30. (Currently Amended) The system of claim [[29]]21, wherein an indication that the 
requested portion of the requested file cannot be randomly accessed comprises an error 
indication or a transfer of the entire requested file. 

31. (Cancelled) 

32. (Previously Presented) The system of claim 2 1 , wherein the information 
comprises hypertext transfer protocol entity tags or last modified timestamp information. 

33. (Original) The system of claim 32, further comprising the step of: 
restarting the requests from the computer malware scanning software for data. 

34. (Currently Amended) The system of claim 33, further comprising the step of: 
transferring [[an]]the entirety of the requested file. 

35. (Previously Presented) The system of claim 2 1 , further comprising the step of: 
performing the steps of claim 1 in response to a request from a user system for the 

requested file. 

36. (Previously Presented) The system of claim 35, further comprising the steps of: 
scanning at the computer malware scanning software the data comprising a 

portion of the requested file to determine if the requested file includes a computer 
malware; and 

delivering the requested file to the user system in response to determining that the 
requested file does not include a computer malware. 
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37. (Currently Amended) The system of claim 36, wherein the step of delivering the 
requested file to the user system comprises the steps of: 

determining whether [[an]]the entirety of the requested file has been transferred; 

starting delivery of the requested file to the user system even if the entire 
requested file has not been transferred; and 

transferring those portions of the requested file that have not been transferred and 
delivering those portions of the requested file once they have been transferred. 

38. (Previously Presented) The system of claim 37, wherein the step of transferring 
those portions of the requested file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the 
requested file that have not been transferred. 

39. (Original) The system of claim 38, wherein the session is a hypertext transfer 
protocol session. 

40. (Previously Presented) The system of claim 39, wherein the hypertext transfer 
protocol session uses the byte range technique. 

4 1 . (Currently Amended) A computer program product for transferring a 
requested file for a computer malwore scanning ooftwaro comprising: 

a tangible computer readable storage medium; 

computer program instructions, recorded on the computer readable storage 
medium, executable by a processor, for performing the steps of 

receiving a request to transfer a file from a computer malware scanning software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file selected in a random order 
by the computer malware scanning software from among portions of the requested file 
and based on a portion of the requested file to be scanned by the computer malware 
scanning software, wherein the computer program product is operable such that the 
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randomly accessed portion of the requested file is requested utilizing a byte range 
technique; 

in response to a determination that the requested portion of the requested file 
cannot be transferred, transferring an entirety of the requested file and supplying the 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file, wherein the computer program product is 
operable such that it is determined that the requested portion of the requested file cannot 
be transferred if the requested portion of the requested file cannot be randomly accessed; 

in response to a determination that the requested portion of the requested file can 
be transferred, t ransferring the requested portion of the requested file and supplying the 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
requested file; and 

determining whether information associated with the requested file has changed; 

wherein the computer program product is operable such that the byte range 

technique turns a serial download mechanism into a 
random access file mechanism; 

wherein the computer program product is operable such that the data associated 
with the request from the computer malware scanning software comprises a plurality of 
randomly accessed portions of the requested file. 

42. (Previously Presented) The computer program product of claim 41 , wherein the 
request to transfer the requested file from the computer malware scanning software 
comprises a request to transfer the requested file from an external system. 

43. (Original) The computer program product of claim 42, wherein the external 
system is communicatively connected via a network. 

44. (Original) The computer program product of claim 43, wherein the network 
comprises the Internet. 
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45. (Previously Presented) The computer program product of claim 44, wherein the 
step of transferring the requested portion of the requested file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 
requested file. 

46. (Original) The computer program product of claim 45, wherein the session is a 
hypertext transfer protocol session. 

47. (Previously Presented) The computer program product of claim 46, wherein the 
hypertext transfer protocol session uses the byte range technique. 

48. (Cancelled) 

49. (Cancelled) 

50. (Currently Amended) The computer program product of claim [[49]]4i, wherein 
an indication that the requested portion of the requested file cannot be randomly accessed 
comprises an error indication or a transfer of the entire requested file. 

51. (Cancelled) 

52. (Previously Presented) The computer program product of claim 41 , wherein the 
information comprises hypertext transfer protocol entity tags or last modified timestamp 
information. 

53. (Original) The computer program product of claim 52, further comprising the step 
of: 

restarting the requests from the computer malware scanning software for data. 
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54. (Currently Amended) The computer program product of claim 53, further 
comprising the step of: 

transferring [[an]]the entirety of the requested file. 

55. (Previously Presented) The computer program product of claim 41 , further 
comprising the step of: 

performing the steps of claim 1 in response to a request from a user system for the 
requested file. 

56. (Previously Presented) The computer program product of claim 55, further 
comprising the steps of: 

scanning at the computer malware scanning software the data comprising a 
portion of the requested file to determine if the requested file includes a computer 
malware; and 

delivering the requested file to the user system in response to determining that the 
requested file does not include a computer malware. 

57. (Currently Amended) The computer program product of claim 56, wherein the 
step of delivering the requested file to the user system comprises the steps of: 

determining whether [[an]]the entirety of the requested file has been transferred; 

starting delivery of the requested file to the user system even if the entire 
requested file has not been transferred; and 

transferring those portions of the requested file that have not been transferred and 
delivering those portions of the requested file once they have been transferred. 

58. (Previously Presented) The computer program product of claim 57, wherein the 
step of transferring those portions of the requested file that have not been transferred 
comprises the step of: 

initiating a session with the external system to obtain those portions of the 
requested file that have not been transferred. 
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59. (Original) The computer program product of claim 58, wherein the session is a 
hypertext transfer protocol session. 

60. (Previously Presented) The computer program product of claim 59, wherein the 
hypertext transfer protocol session uses the byte range technique. 

61. (Cancelled) 

62. (Cancelled) 

63. (Previously Presented) The method of claim 1 , wherein the plurality of randomly 
accessed portions of the requested file are read in a random order. 

64. (Previously Presented) The method of claim 1, wherein a system call handler 
intercepts system level calls made by the computer malware scanning software and 
simulates system level function calls utilized by the computer malware scanning software 
to determine whether the requested file includes the computer malware. 

65. (New) The method of claim 1, wherein scanning by the computer malware 
scanning software is performed in parallel with transfers of requested portions of the 
requested file to the malware scanning software. 



